AW: [Snort-users] >2Gb capture files

vogt at ...2362... vogt at ...2362...
Mon Jun 25 06:37:21 EDT 2001


> 1) Does anyone have a good snort logrotate script?
> 2) If I upgrade the system to RedHat 7.1, will snort/libpcap 
> suddenly be
> "ok" with such large files?

look at what kernel 7.1 uses. the 2.4 kernel series supports files larger
than 2 gb (anyone
know where the new upper limit is?). so if 7.1 is 2.4.x then you should be
fine. or you could stay at 7.0 and just upgrade the kernel.







More information about the Snort-users mailing list